Finite State Reviews & Product Details

Finite State empowers device OEMs to ship securely while enabling engineering teams to move at the speed of AI, immediately transforming product artifacts into audit-ready assurance through a single automated workflow. Leveraging deep binary analysis and AI-native execution, the platform unifies code, compiled components, and firmware in minutes—connecting security design with deployed software. By continuously generating SBOMs, VEX, and signed compliance packages, Finite State enables connected device companies across industries such as medical devices and automotive to meet evolving regulations, including the EU Cyber Resilience Act (CRA), and deliver continuous compliance at speed. Learn more at https://finitestate.io/

Seller

Finite State

Discussions

Finite State Community

Languages Supported

English

Overview by

Lindsey Havens

G2 reviews are authentic and verified.

Here's how.

Prasanth B.

Developer

Mid-Market (51-1000 emp.)

6/23/2026

"Finite State Review: Firmware Security Simplified"

5/5

What do you like best about Finite State?

What I appreciate most about Finite State is its ability to make hidden risks visible. Traditional security tools often stop at surface-level checks, but Finite State digs deep into firmware and supply chain components to uncover vulnerabilities that would otherwise remain unnoticed. By generating detailed SBOMs and mapping out dependencies, it gives developers and security teams a clear picture of what’s inside their devices. This level of visibility is invaluable because it transforms complex, opaque systems into actionable insights, helping organizations prioritize fixes and strengthen their overall security posture. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

Finite State is powerful, but it can be resource‑intensive and complicated to adopt, which makes it harder for smaller or less security‑focused teams to get immediate value. Review collected by and hosted on G2.com.

What problems is Finite State solving and how is that benefiting you?

Finite State is solving the problem of visibility and security in connected devices and their supply chains, which has traditionally been a blind spot for developers. Modern software often relies on third‑party libraries, open‑source components, and firmware bundles that are difficult to track manually. Finite State addresses this by automatically generating SBOMs, analyzing firmware, and mapping vulnerabilities to specific components. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the thoughtful review, Prasanth. Surfacing firmware and supply chain risk, and making it clear enough to act on, is the problem we set out to solve, so we're glad that depth is proving valuable to your team. We also appreciate your perspective on adoption. Reducing the effort it takes to reach that first useful result is something we're continuously working to improve, and feedback like yours helps guide where we focus.

Suru S.

Manager

Enterprise (> 1000 emp.)

6/16/2026

"Deep Visibility Into Supply Chain Risks and CVEs—Boosting Product Security"

5/5

What do you like best about Finite State?

What I like best about Finite State is its ability to provide deep visibility into software supply chain risks by accurately identifying CVEs across third-party components and embedded dependencies. This level of insight, especially at the binary and firmware level, helps us proactively address vulnerabilities that are otherwise hard to detect. As a result, it enables better risk prioritization and contributes directly to improving the stability and security of our products. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

The onboarding can take some time, and the UI can feel a bit complex at first. Also, scans for larger files can be slow, which affects quick feedback. Simplifying the interface and improving speed would make it easier to use. Review collected by and hosted on G2.com.

What problems is Finite State solving and how is that benefiting you?

Finite State helps us identify vulnerabilities (CVEs) in third-party and embedded components that are usually hard to detect. This improves our visibility into security risks, allowing us to fix issues early. As a result, our products become more stable, secure, and reliable before release. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for sharing your experience, Suru. Identifying CVEs across third-party and embedded components at the binary and firmware level, where they're often hardest to catch, is difficult and detailed work, so we're glad that depth is helping strengthen the security and stability of your products. We've also noted your feedback on onboarding and scan performance for larger files, and streamlining those parts of the experience is something we're continuously working to improve.

Anitha M.

Security Engineer

Enterprise (> 1000 emp.)

6/22/2026

"A Powerful Platform for Software and Firmware Security"

5/5

What do you like best about Finite State?

The platform is easy to navigate and offers strong visibility into vulnerabilities, helping teams quickly identify and address risks. Its structured approach simplifies complex security analysis, making it easier to prioritize what truly matters and improve overall product quality with reliability. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

One area for improvement is some parts of the interface can also feel a bit dense, making navigation less intuitive. Additionally, scan times for larger files may be longer, which can slow down feedback. Simplifying the user experience and improving integrations would make it easier for teams to adopt and use effectively. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the detailed review, Anitha. Giving your team clear visibility and a structured way to focus on the risks that matter most is what we're after, so we're glad that's coming through. We've also noted your feedback on interface density and scan times for larger files. Both are areas we're actively working to improve, and detailed feedback like yours helps us prioritize the right things.

venkat a.

Mid-Market (51-1000 emp.)

7/2/2026

"Efficient Vulnerability Scanning, Needs Exploration"

3.5/5

What do you like best about Finite State?

I like using Finite State for Binary Scanning and Vulnerability analysis, especially since certain features like the FS-CLI command line interface and UI options are more straightforward compared to Blackduck. I appreciate the Vulnerability Reporting on critical items and find the license pricing per project to be an advantage. The initial setup was smooth, thanks to a demo session from partners. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

As of now there is no such, but the UI could be more interactive while reports downloads. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for sharing your experience, Venkat. We're pleased to hear that the simplicity of the FS-CLI, intuitive UI, and binary scanning capabilities are helping your team analyze vulnerabilities more efficiently. It's also great to know that the reporting, project-based licensing, and onboarding experience provided value from the start.

We appreciate your suggestion about making report downloads more interactive. Feedback like this helps us continue refining the user experience while keeping the platform focused on delivering clear, actionable security insights for product security teams.

Verified User in Automotive

Enterprise (> 1000 emp.)

6/16/2026

"Friendly UI and timely scans, but organization and ECU component definitions need work"

3.5/5

What do you like best about Finite State?

The tool is good, with a solid understanding of the user, and the interface is friendly for reviewing and examining the results. Scan results are usually delivered on time and are prompt. However, the platform currently lacks integration with Git/SVN to perform code analysis; I’m waiting for that feature to become available in the portal. As a technical person, I’m not aware of the tool’s pricing details, but so far the project budgeting seems mostly aligned with what is being charged. Product onboarding is flawless on the platform, though it could be enhanced when dealing with re-use or similar kinds of projects within a customer’s scope. I haven’t used the AI features yet; however, the integrated results already demonstrate some intelligence in how the results are presented. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

The organization of the product could be improved a lot. While it defines the components for automotive ECU firmwares, the way those components are presented still needs significant work. Clearer structure and better labeling—ideally with the components shown in a tabulated format—would make it easier to understand the output and would increase confidence in the results. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the detailed review, and for the specific feedback. We're glad onboarding and scan turnaround are working well for you with Finite State. We've also noted your points on how ECU firmware components are organized and labeled, along with your interest in code-analysis integration. Presenting that output more clearly is an area we're focused on, and input like yours helps us prioritize where to improve.

Denver M.

Small-Business (50 or fewer emp.)

6/18/2026

"Intuitive Security Management with Powerful Automation"

4/5

What do you like best about Finite State?

I use Finite State to analyze and prioritize security vulnerabilities in our product. It scans and highlights these vulnerabilities on its dashboard, which helps us maintain product security. I like its intuitive interface and that it's possible to automate parts of the process. Access to the FS API allowed us to automate tasks that would be tedious otherwise, making it easier to manage our workload. I also like how vulnerabilities are grouped by packages, so we can quickly assess the security overview and decide which packages need urgent attention. The team was very helpful in resolving previous issues, which I appreciate. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

N/A Review collected by and hosted on G2.com.

What problems is Finite State solving and how is that benefiting you?

I use Finite State to analyze and prioritize security vulnerabilities. It scans our product and highlights issues on a dashboard, giving us visibility. Automation through the FS API reduces tedious tasks, and vulnerabilities are grouped by package, helping us focus on urgent issues easily. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the kind review, Denver. The dashboard, package-level grouping, and API automation are all built to help your team cut through the noise and focus on what's most urgent, so we're glad they're delivering that in practice. We'll also pass your note along to the support team, who will be glad to know they made a difference. Please don't hesitate to reach out if there's anything we can help with.

Verified User in Security and Investigations

Enterprise (> 1000 emp.)

6/22/2026

"Finite State Gives Us Everything We Need"

4/5

What do you like best about Finite State?

We use it with an integration with armorcode - I have no idea why we integrate it with armorcode given finite state gives us everything I need to the point I let the architects worry about it Review collected by and hosted on G2.com.

What do you dislike about Finite State?

I work on a linux based product where I spend most of my time verifying via rpm changelog 'yea suse patched this ages ago'. I've used the API to create automation to deal with these cases however Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for taking the time to share this. We're glad Finite State is giving your team what it needs to stay focused on the work that matters most. We also appreciate you describing how you've put the API to work in your own environment; seeing teams build around it that way is always encouraging. We've noted your feedback on verifying patched components, and refining that part of the experience is an area we're continuing to invest in.

Verified User in Industrial Automation

Enterprise (> 1000 emp.)

6/24/2026

"Improved UI, Integrations, and Support—Though Risk Reports Can Be Overcautious"

3.5/5

What do you like best about Finite State?

Finitestate has some solid UI enhancements after the migration, and it also makes our job easier through integration with other security tools. Overall, the performance and customer support have improved drastically. Pricing is comparatively lower than other tools, especially considering the advanced AI features included and ongoing enhancements. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

Finitestate still reports risk for certain components, even though the issue has already been addressed through the upgraded Linux patch. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the clear picture of how it's working for you. The UI work since the migration, the tie-ins with your other security tools, and Finite State's coverage across firmware, cloud, APKs, and thick-client apps are all meant to take friction out of the day-to-day, so it's encouraging that performance and support have moved in the right direction. On components that still flag as risky after a patch has landed, we've taken your note on board, and getting that to reflect reality more reliably is something we want to get right.

Verified User

Small-Business (50 or fewer emp.)

6/25/2026

"Flexible Scanning with Engaged Support"

4/5

What do you like best about Finite State?

I use Finite State for SAST/SCA/SBOM scans in our Cyber Security organization and appreciate its flexible scan engine that allows us to scan most of our products pretty easily. I like that they are open to feedback and constructive criticism, and their customer support is always engaged and willing to help. I also found the initial setup to be fairly straightforward. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

The next generation update has a lot of kinks to work out - some of which are not solely the fault of Finite State. External vendor integration needs some tweaking. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Appreciate you taking the time to write this up. A scan engine flexible enough to run SAST, SCA, and SBOM across most of your products, without much lift to get going, is a big part of what we want Finite State to do well, and we're glad the support team has stayed engaged with you throughout. We've registered your comments on the next-generation rollout and external integrations, and smoothing out those edges is something we're paying close attention to.

Verified User in Computer Networking

Mid-Market (51-1000 emp.)

6/19/2026

"Expert, Indefatigable Service from the Finite State Team"

5/5

What do you like best about Finite State?

The Finite State team have expert knowledge and are indefatigable service providers. Review collected by and hosted on G2.com.

What do you dislike about Finite State?

Finite State billed me on an annual basis; I prefer monthly. Review collected by and hosted on G2.com.

Response from Isaac Hammelburger of Finite State

Thanks for the generous feedback about the Finite State team. Supporting you in building a secure development program, and the right structure around it, is the kind of work we value most, and we appreciate you recognizing it. We've also noted your preference around billing and are looking into it. If you'd like to discuss it further, please reach out to your account contact and we'll be glad to talk it through.